| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464 | <?php/** * Created by PhpStorm. * User: zhengmingwei * Date: 2020/1/7 * Time: 10:01 下午 */namespace addons\unishop\controller;use addons\unishop\extend\Ali;use addons\unishop\extend\Hashids;use addons\unishop\extend\Wechat;use addons\unishop\model\Config;use addons\unishop\model\UserExtend;use EasyWeChat\Factory;use think\Db;use think\Exception;use think\Hook;use think\Log;/** * 支付 */class Pay extends Base{    protected $noNeedLogin = ['getPayType', 'notify', 'authRedirect', 'alipay', 'alinotify', 'weixinOauth2'];    /**     * @ApiTitle    (获取支付类型)     * @ApiSummary  (获取支付类型)     * @ApiMethod   (POST)     * @ApiHeaders  (name=cookie, type=string, required=false, description="用户会话的cookie")     * @ApiHeaders  (name=platform, type=string, required=true, description="客户端平台")     * @ApiReturn   ({"code":1,"msg":"","data":{}})     *     * @ApiReturnParams  (name="alipay", type="bool", description="是否支持 支付宝支付")     * @ApiReturnParams  (name="wxpay", type="bool", description="是否支持 微信支付")     * @ApiReturnParams  (name="offline", type="bool", description="是否支持 货到付款")     * @ApiReturnParams  (name="score", type="bool", description="是否支持 积分兑换")     */    public function getPayType()    {        $platfrom = $this->request->header('platform');        $type = [];        $offline = Config::getByName('offline_pay')['value'] == 1 ? true : false;        switch ($platfrom) {            case 'APP-PLUS';                $type = ['alipay' => true, 'wxpay' => true, 'offline' => $offline];                break;            case 'H5':                $type = ['alipay' => true, 'wxpay' => true, 'offline' => $offline];                // 如果是微信内访问 公众号等                if (Wechat::h5InWechat()) {                    $type['alipay'] = false;                }                break;            case 'MP-WEIXIN':                $type = ['alipay' => false, 'wxpay' => true, 'offline' => $offline];                break;            case 'MP-ALIPAY':                $type = ['alipay' => true, 'wxpay' => false, 'offline' => $offline];                break;            case 'MP-BAIDU':                $type = ['alipay' => false, 'wxpay' => false, 'offline' => $offline];                break;            case 'MP-TOUTIAO':                $type = ['alipay' => false, 'wxpay' => false, 'offline' => $offline];                break;        }        $this->success('', $type);    }    /**     * @ApiTitle    (微信统一下单接口)     * @ApiSummary  (微信统一下单接口)     * @ApiMethod   (GET)     * @ApiHeaders  (name=cookie, type=string, required=false, description="用户会话的cookie")     * @ApiHeaders  (name=token, type=string, required=true, description="请求的Token")     * @ApiHeaders  (name=platform, type=string, required=true, description="客户端平台")     * @ApiParams   (name="order_id", type="string",required=true, description="订单id")     * @ApiReturn   ({"code":1,"msg":"","data":{}})     *     * @ApiReturnParams  (name="return_code", type="string", description="状态码")     * @ApiReturnParams  (name="result_code", type="string", description="状态码")     * @ApiReturnParams  (name="return_msg", type="string", description="状态信息")     * @ApiReturnParams  (name="appid", type="string", description="小程序app_id")     * @ApiReturnParams  (name="mch_id", type="string", description="商户号")     * @ApiReturnParams  (name="nonce_str", type="string", description="支付签名随机串")     * @ApiReturnParams  (name="sign", type="string", description="签名")     * @ApiReturnParams  (name="trade_type", type="string", description="支付类型")     * @ApiReturnParams  (name="timeStamp", type="string", description="时间戳")     * @ApiReturnParams  (name="paySign", type="string", description="支付签名")     * @ApiReturnParams  (name="prepay_id", type="string", description="统一支付接口返回的prepay_id参数值,提交格式如:package: 'prepay_id=' + data.prepay_id")     *     */    public function unify()    {        $orderId = $this->request->request('order_id', 0);        $orderId = Hashids::decodeHex($orderId);        $orderModel = new \addons\unishop\model\Order();        $order = $orderModel->where(['id' => $orderId])->find();        try {            if (!$order) {                $this->error(__('Order does not exist'));            }            //MWEB            $platfrom = $this->request->header('platform', 'MP-WEIXIN');            switch ($platfrom) {                case 'MP-WEIXIN':                    $trade_type = 'JSAPI';                    break;                case 'H5':                    $trade_type = 'MWEB';                    break;                case 'APP-PLUS':                    $trade_type = 'APP';                    break;            }            // 如果是微信内访问 公众号等            if (Wechat::h5InWechat()) {                $trade_type = 'JSAPI';            }            $products = $order->products()->select();            $body = Config::getByName('name')['value'];            foreach ($products as $product) {                $body .= '_' . $product['title'];            }            $openid = Wechat::getOpenidByUserId($this->auth->id);            $appid = Config::getByName('app_id')['value'];            // 如果 JSAPI 必须传openid、            if ($trade_type == 'JSAPI' && empty($openid)) {                $this->success('', array(                    'weixinOauth2' =>                        "https://open.weixin.qq.com/connect/oauth2/authorize?appid=$appid&redirect_uri=".urlencode("https://$_SERVER[HTTP_HOST]/addons/unishop/pay/weixinOauth2")."&response_type=code&scope=snsapi_base&state=".$this->request->request('order_id', 0)."#wechat_redirect"                ,'trade_type' => 'JSAPI'));            }            $app = Wechat::initEasyWechat('payment');            $result = $app->order->unify([                'body' => $body,                'out_trade_no' => $order['out_trade_no'],                'total_fee' => bcmul($order['total_price'],100),                'spbill_create_ip' => $_SERVER['REMOTE_ADDR'], // 可选,如不传该参数,SDK 将会自动获取相应 IP 地址                'trade_type' => $trade_type, // 请对应换成你的支付方式对应的值类型                'openid' => $openid            ]);            if ($result['return_code'] == 'SUCCESS' && $result['result_code'] == 'SUCCESS') {                if ($trade_type == 'JSAPI') {                    // 二次签名                    $result['timeStamp'] = (string)time();                    $result['paySign'] = Wechat::paySign([                        'appId' => $appid,                        'nonceStr' => $result['nonce_str'],                        'package' => 'prepay_id='.$result['prepay_id'],                        'timeStamp' => $result['timeStamp'],                        'signType' => 'MD5'                    ], Config::getByName('key')['value']);                } elseif ($trade_type == 'MWEB') {                    $page = '/pages/order/order?state=0';                    if ($platfrom == 'APP-PLUS') {                        $page = '/pages/index/index';                    }                    $result['mweb_url'] .= '&redirect_url='. urlencode('https://'.$_SERVER['HTTP_HOST'].'/h5/#'.$page);                    $result['referer'] = 'https://'.$_SERVER['HTTP_HOST'];                } elseif ($trade_type == 'APP') {                    $result['orderInfo']['appid'] = $result['appid'];                    $result['orderInfo']['noncestr'] = $result['nonce_str'];                    $result['orderInfo']['package'] = "Sign=WXPay";                    $result['orderInfo']['partnerid'] = $result['mch_id'];                    $result['orderInfo']['prepayid'] = $result['prepay_id'];                    $result['orderInfo']['timestamp'] = (string)time();                    $result['orderInfo']['sign'] = Wechat::paySign(                        $result['orderInfo'],                        Config::getByName('key')['value']                    );                }            } else {                $this->error($result['return_msg']);            }        } catch (Exception $e) {            $this->error($e->getMessage());        }        $this->success('', $result);    }    /**     * 微信订单支付通知回调     * @ApiInternal     */    public function notify()    {        // 添加行为        Hook::add('paid_success', 'addons\\unishop\\behavior\\Order');        Hook::add('paid_fail', 'addons\\unishop\\behavior\\Order');        $app = Wechat::initEasyWechat('payment');        $response = $app->handlePaidNotify(function($message, $fail) use ($app){            try {                // 使用通知里的 "微信支付订单号" 或者 "商户订单号" 去自己的数据库找到订单                $orderModel = new \addons\unishop\model\Order(); //($message['out_trade_no']);                $order = $orderModel->where(['out_trade_no' => $message['out_trade_no']])->find();                if (!$order || $order->have_paid != \addons\unishop\model\Order::PAID_NO) {                    return true; // 告诉微信,我已经处理完了,订单没找到,别再通知我了                }                // 这里调用微信的【订单查询】接口查一下该笔订单的情况,确认是已经支付                $result = $app->order->queryByOutTradeNumber($message['out_trade_no']);                if ($result['return_code'] == 'FAIL' || empty($result['result_code']) || $result['result_code'] == 'FAIL') {                    return $fail('订单未支付');                }                // 检查是否成功                if ($message['return_code'] === 'SUCCESS') { // return_code 表示通信状态,不代表支付状态                    // 用户是否支付成功                    if ($message['result_code'] === 'SUCCESS') {                        Hook::listen('paid_success', $order, ['pay_type' => \addons\unishop\model\Order::PAY_WXPAY]);                    } elseif ($message['result_code'] === 'FAIL') {                        // 用户支付失败                        Hook::listen('paid_fail', $order);                    }                } else {                    return $fail('通信失败,请稍后再通知我');                }                return true;            } catch (\Exception $e) {                // 记录日志                Log::record('支付回调错误:'. $e->getMessage());                return $fail('通信失败,请稍后再通知我');            }        });        $response->send();    }    /**     * @ApiTitle    (货到付款)     * @ApiSummary  (线下支付-货到付款)     * @ApiMethod   (GET)     * @ApiHeaders  (name=cookie, type=string, required=false, description="用户会话的cookie")     * @ApiHeaders  (name=token, type=string, required=true, description="请求的Token")     * @ApiParams   (name="order_id", type="string",required=true, description="订单id")     * @ApiReturn   ({"code":1,"msg":"","data":true})     *     */    public function offline()    {        $orderId = $this->request->get('order_id', 0);        $orderId = Hashids::decodeHex($orderId);        $orderModel = new \addons\unishop\model\Order();        $order = $orderModel->where(['id' => $orderId])->find();        if (!$order) {            $this->error(__('Order does not exist'));        }        try {            Db::startTrans();            Hook::add('paid_success', 'addons\\unishop\\behavior\\Order');            Hook::listen('paid_success', $order, ['pay_type' => \addons\unishop\model\Order::PAY_OFFLINE]);            Db::commit();        } catch (Exception $e) {            Db::rollback();            $this->error($e->getMessage());        }        $this->success('', true);    }    /**     * @ApiTitle    (获取JSAPI配置)     * @ApiSummary  (微信内H5-JSAPI支付)     * @ApiMethod   (GET)     * @ApiHeaders  (name=cookie, type=string, required=false, description="用户会话的cookie")     * @ApiHeaders  (name=token, type=string, required=true, description="请求的Token")     * @ApiReturn   ({"code":1,"msg":"","data":{}})     *     * @ApiReturnParams  (name="debug", type="bool", description="调试模式")     * @ApiReturnParams  (name="jsApiList", type="array", description="授权功能列表")     * @ApiReturnParams  (name="appId", type="string", description="小程序app_id")     * @ApiReturnParams  (name="nonceStr", type="string", description="随机数")     * @ApiReturnParams  (name="timestamp", type="string", description="时间戳")     * @ApiReturnParams  (name="signature", type="string", description="签名")     *     */    public function jssdkBuildConfig()    {        $app = Wechat::initEasyWechat('payment');        $configData = $app->jssdk->buildConfig(['chooseWXPay'], false, true, false);        $this->success('', $configData);    }    /**     * @ApiTitle    (支付宝支付)     * @ApiSummary  (支付宝支付)     * @ApiMethod   (GET)     * @ApiHeaders  (name=cookie, type=string, required=false, description="用户会话的cookie")     * @ApiHeaders  (name=token, type=string, required=true, description="请求的Token")     * @ApiParams   (name="order_id", type="string",required=true, description="订单id")     * @ApiReturn   (重定向到支付宝支付网页)     *     */    public function alipay()    {        $orderId = $this->request->request('order_id', 0);        $orderId = Hashids::decodeHex($orderId);        $orderModel = new \addons\unishop\model\Order();        $order = $orderModel->where(['id' => $orderId])->find();        try {            if (!$order) {                $this->error(__('Order does not exist'));            }            $products = $order->products()->select();            $body = Config::getByName('name')['value'];            foreach ($products as $product) {                $body .= '_' . $product['title'];            }            $platfrom = $this->request->header('platform', 'H5');            $alipay = Ali::initAliPay();            $order = [                'out_trade_no' => $order->out_trade_no,                'total_amount' => $order->total_price,                'subject'      => $body,                'http_method'  => 'GET' // 如果想在 wap 支付时使用 GET 方式提交,请加上此参数。默认使用 POST 方式提交            ];            switch ($platfrom) {                case 'H5':                    // 直接返回                    $alipay->wap($order)->send();                    break;                case 'APP-PLUS':                    //$pay->app($order)->send();                    $this->success('', $alipay->app($order)->getContent());                    break;                case 'MP-ALIPAY':                    break;                default:                    $this->error('此平台不支持支付宝支付');            }        } catch (Exception $e) {            $this->error($e->getMessage());        }    }    /**     * 支付宝回调地址     * @ApiInternal     */    public function alinotify()    {        $alipay = Ali::initAliPay();        try{            $data = $alipay->verify(); // 是的,验签就这么简单!            // 请自行对 trade_status 进行判断及其它逻辑进行判断,在支付宝的业务通知中,只有交易通知状态为 TRADE_SUCCESS 或 TRADE_FINISHED 时,支付宝才会认定为买家付款成功。            // 1、商户需要验证该通知数据中的out_trade_no是否为商户系统中创建的订单号;            // 2、判断total_amount是否确实为该订单的实际金额(即商户订单创建时的金额);            // 3、校验通知中的seller_id(或者seller_email) 是否为out_trade_no这笔单据的对应的操作方(有的时候,一个商户可能有多个seller_id/seller_email);            // 4、验证app_id是否为该商户本身。            // 5、其它业务逻辑情况            if (in_array($data['trade_status'], ['TRADE_SUCCESS', 'TRADE_FINISHED'])) {                // 支付成功                //Log::record('Alipay notify ,支付成功');                // 条件一                $orderModel = new \addons\unishop\model\Order(); //($message['out_trade_no']);                $order = $orderModel->where(['out_trade_no' => $data['out_trade_no']])->find();                if (!$order || $order->have_paid != \addons\unishop\model\Order::PAID_NO) {                    throw new Exception('订单不存在或已完成');                }                // 条件二                if ($order->total_price > $data['total_amount'] || $order->total_price < $data['total_amount']) {                    throw new Exception('金额不一');                }                // 条件三                if ($data['app_id'] != Config::getByName('ali_app_id')['value']) {                    throw new Exception('app_id不一');                }                // 添加行为                Hook::add('paid_success', 'addons\\unishop\\behavior\\Order');                Hook::listen('paid_success', $order, ['pay_type' => \addons\unishop\model\Order::PAY_ALIPAY]);            }        } catch (\Exception $e) {            Log::record('Alipay notify ,支付失败: '. $e->getMessage());            return $alipay->success()->send();        }        return $alipay->success()->send();// laravel 框架中请直接 `return $alipay->success()`    }    /**     * 微信网页授权     * @ApiInternal     */    public function weixinOauth2()    {        $config = [            'app_id' => Config::getByName('app_id')['value'],            'secret' => Config::getByName('secret')['value'],            // 指定 API 调用返回结果的类型:array(default)/collection/object/raw/自定义类名            'response_type' => 'array',            //...        ];        $app = Factory::officialAccount($config);        $oauth = $app->oauth;        $user = $oauth->user();        $order_id = $this->request->request('state', 0);        $orderId = Hashids::decodeHex($order_id);        $orderModel = new \addons\unishop\model\Order();        $order = $orderModel->where(['id' => $orderId])->find();        if ($order) {            $userExtend = (new UserExtend())->where(['user_id' => $order->user_id])->find();            if (!$userExtend) {                // 把openid写进去                (new UserExtend())->save(['user_id' => $order->user_id, 'openid' => $user->getId()]);            }            //$_SERVER['HTTP_HOST'] = 'localhost:8080';            $url = 'https://'.$_SERVER['HTTP_HOST'].'/h5/#/pages/money/pay?order_id='.$order_id.'&total='.$order->total_price.'&pay=1';            header("Location: $url");        }        exit;    }}
 |